Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EU51jvyydFvA0U6R95sxpMWEqZA.cer
File:                     EU51jvyydFvA0U6R95sxpMWEqZA.cer (raw, json)
Hash identifier:          WqZVUixa2YnHSnSx560Dlmmt2W8eklOIHzhxzwNpUJ0=
Subject key identifier:   11:4E:75:8E:FC:B2:74:5B:C0:D1:4E:91:F7:9B:31:A4:C5:84:A9:90
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0187370BBAEBEFA4CDB24396BD6650795ABC
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/48/886052-4231-4416-ad0f-f0c35b993a0d/1/EU51jvyydFvA0U6R95sxpMWEqZA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/48/886052-4231-4416-ad0f-f0c35b993a0d/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 31 Mar 2023 09:42:08 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 35485
                          AS: 60227
                          IP: 46.254.176.0/21
                          IP: 93.94.32.0/21
                          IP: 93.174.64.0/21
                          IP: 158.58.136.0/21
                          IP: 185.34.84.0/22
                          IP: 185.84.176.0/22
                          IP: 2a02:6a40::/32
                          IP: 2a05:a440::/29

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:37:0b:ba:eb:ef:a4:cd:b2:43:96:bd:66:50:79:5a:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Mar 31 09:42:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=114e758efcb2745bc0d14e91f79b31a4c584a990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:55:a5:e9:34:9e:14:e3:bb:27:d8:59:e0:09:
                    41:3c:53:5d:f9:ce:8c:7a:7f:96:98:fc:de:0e:d3:
                    bb:ea:47:91:25:87:c2:03:50:75:e1:a3:6d:3b:16:
                    36:b4:f0:4f:e2:d8:ec:af:b3:c0:5b:10:4e:6a:23:
                    98:6a:83:71:6b:63:2b:5d:ad:55:93:51:62:a8:cc:
                    0f:4e:ac:d7:bd:d5:ec:90:71:e3:e0:37:8e:a1:d1:
                    6f:a2:70:d2:28:0c:7d:78:ad:e9:59:bd:f0:6f:87:
                    fe:61:1d:6e:1f:66:85:58:66:3d:b8:cc:91:4c:e0:
                    6e:fb:46:29:0f:53:41:8e:97:82:aa:c1:ce:41:7b:
                    ee:60:fc:d1:fa:81:56:45:cb:1e:fe:6b:bd:c0:a5:
                    0f:1e:91:89:88:f5:fc:c3:32:97:56:79:61:c9:a6:
                    d7:1e:ce:15:7b:8e:d6:4a:4d:62:b9:45:0e:d4:7e:
                    0f:83:76:ce:13:79:0e:95:c8:88:b2:79:bf:3b:e9:
                    9c:ab:3e:6d:01:cf:0e:9b:1b:9b:37:9a:cb:15:0d:
                    25:47:ac:a0:d7:ac:10:f4:9e:1d:5b:97:54:57:ba:
                    05:ef:8b:3c:11:2b:25:45:2f:6c:8f:c2:55:fd:50:
                    37:7d:3f:4e:5f:1a:fd:d8:30:2d:94:0f:9f:61:37:
                    2d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:4E:75:8E:FC:B2:74:5B:C0:D1:4E:91:F7:9B:31:A4:C5:84:A9:90
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/886052-4231-4416-ad0f-f0c35b993a0d/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/886052-4231-4416-ad0f-f0c35b993a0d/1/EU51jvyydFvA0U6R95sxpMWEqZA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.254.176.0/21
                  93.94.32.0/21
                  93.174.64.0/21
                  158.58.136.0/21
                  185.34.84.0/22
                  185.84.176.0/22
                IPv6:
                  2a02:6a40::/32
                  2a05:a440::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  35485
                  60227

    Signature Algorithm: sha256WithRSAEncryption
         76:d4:6f:74:08:02:d4:e3:55:a6:a6:7b:bb:67:27:7f:75:fb:
         db:62:fe:07:91:cf:e3:d9:ed:df:2a:36:f1:9f:33:41:d4:b5:
         26:e3:68:cb:b8:8c:c2:e9:69:0c:0f:ee:f4:13:1d:3c:80:47:
         59:5c:75:1e:89:c3:f2:e8:92:c6:79:a6:66:cd:4a:c6:31:bd:
         0b:9e:37:e4:c5:8a:9d:27:8d:fb:29:e7:ec:89:9e:32:56:6f:
         2e:6d:4e:70:a9:b3:63:71:33:54:04:d0:92:94:5b:13:dc:4b:
         8a:6a:42:b9:0b:dc:7a:aa:ee:ba:96:a4:5c:fb:cd:cf:52:a9:
         4a:18:1b:e5:30:81:05:5f:27:58:45:7c:e8:00:b2:ec:cc:b2:
         e6:b5:d9:aa:8d:9f:8d:a5:1a:2f:cb:df:60:10:ad:aa:d1:50:
         63:7a:cf:b6:05:39:57:b3:f8:13:36:d9:56:bd:f7:71:9a:24:
         6f:c1:4f:41:f4:99:95:a1:57:d7:32:2b:da:b9:c8:2e:1f:47:
         ab:b9:ee:35:fd:63:b3:6a:9f:88:42:cd:8d:88:29:25:6a:36:
         66:f4:a2:dc:ae:e8:e0:c6:aa:cd:7d:84:d5:42:66:59:85:08:
         2d:cf:4d:f7:d8:11:2b:9b:58:7f:c1:df:d7:c4:85:0e:2f:e7:
         93:f7:f1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 8 07:39:03 2023 by rpki-client on console-fra.rpki-client.org